• We are excited to announce an updated bug bounty program for 0x Protocol v4!

• The program is open to anyone, with rewards of up to $1M for critical exploits

0x Protocol is an open protocol that facilitates the exchange of digital assets. In 2019 we introduced v4, a modular smart contract architecture that enables us to innovate with minimal friction alongside the growing DeFi and NFT ecosystems. While v4 contracts initially only supported ERC-20 swaps, we will soon be adding support for ERC-721 and ERC-1155 swaps.

The updated bug bounty program aims to incentivize ethical hackers to discover and report vulnerabilities in the 0x Protocol architecture. The bug bounty covers any of the core smart contracts deployed on Ethereum mainnet, Binance Smart Chain, Polygon, Avalanche, Fantom, Celo, Optimism and future deployments on other EVM-compatible networks.

The list of deployed contracts eligible for the bug bounty can be found here. The most recent addition is the NFT swap feature coming soon to v4 that enables the trading of ERC-721 and ERC-1155 assets.

Bounty program rewards will be paid out according to the severity of a vulnerability. The severity of reported vulnerabilities will be graded according to the Common Vulnerability Scoring Standard (CVSS). The final reward amount is at the sole discretion of 0x Labs and will be paid in the specified sum in either USD or ETH.

Rewards are split based on the severity of the vulnerability as follows: